Official PHP wrapper for the VatFlow API (EU VAT validation & monitoring)
61%
Total Score
caution
Usable with caveats: no repository commits in the last three months after a one-day release burst.
All five releases arrived within roughly two hours on March 1, followed by about seven months without another release. That burst-and-silence pattern makes ongoing maintenance uncertain.
There were no commits and no active maintainers in the last three months. Combined with the short release burst, this is a meaningful maintenance concern for a new SDK.
Composer build tooling is present, but the repository reports no security scanning. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy. For an SDK handling API credentials, that reduces transparency about how vulnerabilities should be reported and managed.
We didn't find any vulnerabilities for this package.
| Version | Published | Vulnerabilities |
|---|---|---|
| v1.0.4 | 1 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.0.3 | 1 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.0.2 | 1 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.0.1 | 1 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.0.0 | 1 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.10 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.